Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/fCscbbhBHUITxQFS0cdgSkITvYA.roa
File:                     fCscbbhBHUITxQFS0cdgSkITvYA.roa (raw, json)
Hash identifier:          lJlLicoH+zVtefD5DiKIXT13Q8xvIsThob9ydrJsOrA=
Subject key identifier:   7C:2B:1C:6D:B8:41:1D:42:13:C5:01:52:D1:C7:60:4A:42:13:BD:80
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       08D5
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/fCscbbhBHUITxQFS0cdgSkITvYA.roa
Signing time:             Tue 29 Sep 2020 09:52:30 +0000
ROA not before:           Tue 29 Sep 2020 09:52:30 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131627
IP address blocks:        220.229.66.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2261 (0x8d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:52:30 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=7C2B1C6DB8411D4213C50152D1C7604A4213BD80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:26:47:5f:57:19:cb:13:54:52:35:dc:4f:54:
                    3c:2e:d4:cd:2e:17:6b:0c:3d:27:0f:03:ba:8e:88:
                    84:41:01:fa:fe:bd:1c:11:ba:62:9f:e5:0a:a3:c4:
                    07:a3:aa:70:42:e6:3e:52:79:5f:4f:66:99:bd:df:
                    c7:f9:00:df:4d:bc:b5:b2:76:1a:cc:b2:f1:42:17:
                    1b:63:d8:11:57:43:50:9c:ff:1d:14:2a:10:8d:c8:
                    52:fa:d8:4a:8b:3d:bb:1e:dd:b4:6b:ac:88:68:bd:
                    de:6d:5a:be:11:47:64:c9:d8:8f:fc:5f:c2:e7:ea:
                    ff:ed:ac:b4:c5:5d:5b:31:ab:e9:ce:34:7b:01:01:
                    b9:cc:59:ff:da:a2:6d:78:90:a2:7f:99:8d:05:9b:
                    67:ee:29:85:59:f7:13:bd:85:35:b1:57:88:cd:f7:
                    3c:89:36:6a:f7:1a:b8:a2:31:91:f3:ef:4f:f7:a2:
                    1a:a8:22:7a:ce:3b:cc:07:8d:5f:65:e9:3f:fc:22:
                    ec:b4:37:c4:98:25:f9:11:58:a8:b8:3c:ef:45:13:
                    14:ee:fc:12:aa:ff:c0:68:b3:54:15:a6:dc:ea:c0:
                    bd:4a:8c:39:ae:0a:9d:73:33:20:6a:20:80:e0:ac:
                    42:2e:df:fb:99:22:f5:74:cf:a9:ce:3d:30:a1:9c:
                    74:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:2B:1C:6D:B8:41:1D:42:13:C5:01:52:D1:C7:60:4A:42:13:BD:80
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/fCscbbhBHUITxQFS0cdgSkITvYA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.229.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:8c:46:dd:ae:2c:fc:e7:e4:b8:79:bc:f1:f2:33:5b:57:88:
         19:47:4c:76:3d:bc:bf:fd:8a:53:83:e3:8c:3d:12:49:d3:1e:
         d4:ba:85:c0:b8:c6:25:3b:1a:a6:9d:c1:cf:79:93:95:b1:3a:
         bc:67:ad:8e:36:92:a9:68:dd:71:56:6c:ed:76:75:42:d1:21:
         77:13:b4:bd:ec:5f:0f:ff:6f:95:3c:3f:b6:2f:e3:05:1c:b8:
         69:dd:09:73:ed:30:ab:b6:ba:f2:af:da:a8:6f:1b:99:05:fb:
         e1:26:c9:6e:c4:d0:a9:88:91:6a:b4:49:ac:01:8a:ea:e3:7a:
         df:cb:ea:70:f1:e6:aa:6e:a5:52:6d:4b:29:6e:a3:c3:77:8e:
         71:6a:f6:33:c7:8c:a7:d7:08:30:ca:b0:90:9d:02:f6:32:49:
         c2:ba:dd:76:88:88:35:dc:f4:f8:cb:0d:6c:d4:85:91:81:cd:
         95:55:65:cb:05:97:e1:e9:d4:9f:43:1a:ca:45:77:18:f0:84:
         84:38:6a:2f:02:ce:62:dc:d3:a2:b1:94:ae:a5:27:f8:db:fc:
         5e:96:f5:73:de:53:00:a9:77:8a:ad:37:94:79:b5:2d:d0:53:
         a8:2d:32:48:4e:d1:c7:9e:cb:17:78:83:25:50:67:2e:69:09:
         6f:dd:65:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----